Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/GajOoEL_HjlT_3UTiWt16Qmy774.roa
File: GajOoEL_HjlT_3UTiWt16Qmy774.roa (raw, json)
Hash identifier: JR7E++CMFK8/2AZVjVZxUOa/KV6cjI8oJoM0IP+TCgQ=
Subject key identifier: 19:A8:CE:A0:42:FF:1E:39:53:FF:75:13:89:6B:75:E9:09:B2:EF:BE
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 02D7
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GajOoEL_HjlT_3UTiWt16Qmy774.roa
Signing time: Mon 29 Apr 2024 23:55:03 +0000
ROA not before: Mon 29 Apr 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 03:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Apr 29 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19A8CEA042FF1E3953FF7513896B75E909B2EFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:fa:b3:ee:4b:98:3a:c9:43:49:ef:c0:9f:
0c:cc:0e:90:03:63:6e:21:72:a0:e6:b8:16:46:ad:
3b:76:35:30:a6:2e:09:8d:a4:7c:92:2f:86:e4:5c:
da:d4:52:07:72:58:c8:6c:48:16:ba:e9:3b:a9:2d:
79:7d:ef:3b:41:d8:cd:58:6d:b9:ba:5e:5d:37:4f:
31:dc:0e:05:0e:39:08:da:08:7e:7e:3b:8f:2c:29:
eb:4b:c7:a9:02:03:23:ce:bd:f0:68:92:c1:3e:1e:
64:91:dc:91:b1:6a:ef:08:fe:f8:3c:0d:fb:24:15:
60:ae:5f:2c:69:05:d8:08:e6:90:a7:4c:98:38:cb:
8f:0b:93:e4:15:66:77:39:9b:15:82:2f:c1:e9:4d:
d6:97:fa:ab:ce:9d:27:f0:4a:37:f8:4f:de:dd:ff:
1b:de:e5:7c:13:95:17:25:2b:42:7f:d7:53:da:ef:
e1:ca:0e:e7:39:aa:3d:d5:9c:40:fc:45:be:49:c1:
b5:78:87:50:16:a7:9b:d4:0b:25:3d:b1:b2:b3:9d:
c6:5e:cf:40:48:8e:a9:37:8b:a5:3a:5a:b4:ee:d7:
ea:31:3c:b9:e4:52:3c:8f:c8:e5:ce:3b:cc:2d:e1:
20:5d:bf:60:60:53:a7:c1:02:a2:df:f8:31:d8:f2:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:CE:A0:42:FF:1E:39:53:FF:75:13:89:6B:75:E9:09:B2:EF:BE
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/GajOoEL_HjlT_3UTiWt16Qmy774.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
80:80:f4:2c:79:0e:dd:d9:12:55:1f:ad:46:e1:ff:20:00:c3:
43:ed:e3:3f:55:5e:24:12:5d:77:8e:af:38:e9:dd:26:ef:d1:
55:ea:a6:1f:c4:39:b7:a1:8c:81:f9:5d:8b:d7:64:2f:80:d0:
5a:e8:e3:01:f9:79:58:97:64:c4:56:7b:77:4e:dc:90:af:4f:
12:70:76:63:19:f1:84:77:36:47:8d:16:55:1e:f5:c2:f4:0b:
08:63:5c:f4:5f:78:51:90:c6:f7:f8:a9:38:b8:da:81:7e:32:
7c:51:04:cf:4d:b5:42:a7:57:78:32:91:57:08:cc:29:5b:0f:
f8:bf:c7:9b:3a:63:0d:30:e1:4c:e9:00:ab:5d:bc:82:b5:fe:
06:fe:44:57:ac:b9:09:1a:79:85:8c:d1:79:58:47:34:dc:47:
f9:62:31:52:3f:9b:d9:5e:0f:af:8a:97:4e:e3:9a:8a:0d:90:
b0:90:18:24:fb:38:09:11:ce:9c:c4:5c:06:bf:e7:c9:a7:ed:
7a:68:5d:4f:5a:b9:64:17:44:23:00:8c:aa:ea:ac:29:21:4e:
e6:e0:ed:c2:f5:c8:b0:af:82:f7:f7:70:9e:d4:23:cb:bb:af:
d3:c4:f8:78:ab:9e:14:dd:22:b1:c8:99:4f:85:19:35:26:e8:
bc:9d:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org